re-work permissions onUserCan logic to follow mw standards per WEB-8378 #6